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Sir: 

This Reply Brief is submitted in response to the Examiner's Answer dated November 18, 

2005. 
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REMARKS 

On page 7 of the Examiaer's Answer, in response to the Appellants' point of the cited 
references do not teach or suggest a protected storage device for storing an encryption key pair 
and a non-protected storage device for storing encrypted cookies, the Examiner asserts that "all 
data exchanged between browser 100 and HTTP server 402 is encrypted." The Examiner also 
asserts that a browser is "not restricted, not secure, and unsafe area," that "Shrader teaches otixer 
encryption techniques, such as a private key cryptosystem using a session key the key pair 
h constructed and stored locally...," and that "Win and Shrader, in combination, teach the 
claimed subject matter." 

Msxrnmg arguendo that the Examiner^s above-mentioned assertions are correct, the 
Examiner still has not pointed out where in Win and/or Shrader that teaches the claimed steps 
of "in response to the receipt of a cookie generated by an apphcation from a remote server, 
encxypting said cookie with said public key" and "storing said encrypted cookie in a non- 
protected storage device within said data processing system." In addition, Shrader may have 
taught various encryption techniques, but Shrader does not teach or suggest the claimed step of 
"storing a encryption key pair having a private key and a public key in a protected storage device 
within said data processing system." 

On page 9 of the Examiner's Answer, in response to the Appellants' point of the cited 
references do not teach or suggest a hard drive for storing encrypted cookies, the Examiner 
asserts that Claim 2 does not reflect the Appellants' arguments, and that "Win teaches when a 
user quits the browser 100, cookies that have not expired are saved on a mass storage device 
associated with the browser 100, such as a disk drive.*, (colunon 11, lines 14-18 of Win)" 

Claim 1 recites a step of "storing said encrypted cookie in a non-protected storage device 
within said data processing system," and Claim 2, which depends on Claim 1, recites "said 
non-protected storage device is a hard drive." Thus, Claim 2 supports the Appellant's point of 
the claimed invention provides "a hard drive for storing encrypted cookies." In addition, even 
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with the above-cited passage, the Examiner still has not provided any reference ftom Win that 
teaches the cookies being saved on a disk drive are encrypted. Also, coL 1 !, lines 14-18 of Win 
states that "Administrators may also defined the time ajfter which a user is prompted to changed 
the user*s passage. This period can be set system wide or for each individual user. The system 
ensures that passwords are not reused/* and such teachings are different from what the Examiner 
has cited. 

For the reasons stated above. Appellants believe the § 103 rejection for Claims 1-7 and 
10-16 is improper and should be reversed. 

No fee or extension of time is belierved to be necessary; however, in the event an 
additional fee or extension of time is required, please charge that fee or extension of time 
requested to the Lenovo Deposit Account 50-3533. 
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